A COPY PROTECTED DVD DISC AND METHOD FOR PRODUCING AND 

VALIDATING SAME 

CROSS-REFERENCE TO RELATED APPLICATIONS 

This application claims the benefit of U.S. Provisional Patent Application 
5 Ser. No. 60/252,894, filed November, 27, 2000, and entitled " Copy protected 
digital video disc (DVD)," incorporated herein by reference in its entirety. 

FIELD OF THE INVENTION 

The present invention relates to copy protection of digital optical discs 
(DVD) in general. 

io BACKGROUND OF THE INVENTION 

Digital optical discs (referred to as DVD discs) are commonly used to store 
software applications and content in digital form, typically 4,7 Gigabytes per disc or 
more. DVD discs come in a variety of formats: manufactured discs, such as DVD- 
ROM, one-time recordable discs, such as DVD-R, and rewritable discs such as 
is DVD-RAM and DVD-RW. DVD-ROM discs are generally mass-produced in a 
disc-replication manufacturing process that includes glass mastering, 
electroforming, and stamping. Recordable and rewritable discs are generally 
produced individually or in small quantities by DVD-recorders containing suitable 
blank media. DVD-recorders and blank media, together with appropriate "burning" 
20 software, are readily accessible to individual consumers. 

DVD discs are susceptible to unauthorized replication. Due to the digital 
nature of DVD, such an unauthorized discs may be essentially identical to 
authentic ones. Unauthorized discs can be manufactured on a mass-produced 
basis, or can be recorded by consumers with a computer, DVD-recorder, and 
25 blank media. The problem of unauthorized end user recording is growing more 
acute, now that DVD-recorders are available for a few hundred dollars, and blank 
media is available for around 5 dollars. 

Digital data written to digital optical discs (DVD) undergoes a well-defined 
series of processing steps including interleaving, Reed-Solomon encoding, and 
30 Eight-to-Sixteen encoding (known as EFM-Plus), for DVDs. 
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EFM+ encodings ate physically represented by microscopic patterns of 
pits and lands (or in the case of rewritable discs, by microscopic regions of lesser 
and greater reflectivity). An encoded '1' represents a transition between a pit and 
land (or lesser and greater reflectivity), while an encoded 'O’ represents a 
5 continuation of a pit or land ( or a continuation of lesser or greater reflectivity). 

Excessive physical damage to the media surface, such as a scratch, can 
obscure the precise location of the transitions and thereby corrupt the data 
reading. To protect against such hazards, the media is written with additional data 
in the form of error correcting symbols. These are mathematically determined to 
10 correspond to the other data written on the media in such a way that the player can 
use them as it reads the media not only to determine if errors have occurred, but 
under certain conditions to correct errors. A fixed number of data symbols, 
together with fixed number of symbols compacted for them form a data structure 
known as an error correction codeword (ECC). Methods for choosing and 
is implementing appropriate error correction coding are well-known in the art. 

In ordinary use, error detection and correction is desirable, as it reduces 
the probability that the data read from digital optica! media and delivered to the 
user will become corrupted by minor physical damage to the media. 

However, making changes to the disc in order to prevent the disc from 
20 being illegally copied are likely to be frustrated by the ECC of the DVD. 
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SUMMARY OF THE INVENTION 


The present invention inhibits unauthorized replication or recording of DVD 
discs by providing one or more means of distinguishing between an authentic disc 
and an unauthorized copy. One means of copy protection is to store information 
5 on a disc that can be read, but not easily reproduced. A further means of copy 
protection is to store data on a disc in a way such that by reading the data in a 
special way, it is possible to distinguish between an authentic disc and an 
unauthorized copy, even if the same data is read from both discs. 

DVD discs contain an Information Zone, comprising a Lead-in Zone, Data 
10 Zone, and Lead-out Zone (Figs. 10 and 11). Generally speaking, the Data Zone of 
a DVD contains the intellectual property to be protected such as software 
programs or content. DVD recorders are generally capable of faithful duplication 
of the Data Zone, but not the contents of the Lead-in Zone. Thus the present 
invention teaches writing data to certain locations in the Lead-in Zone that are 
is generally replaced with default values by DVD recorders. Standard functions allow 
these locations of the Lead-in Zone to be read from a disc. If the data differs from 
that written on an authentic disc, the disc under question is an unauthorized copy. 

More sophisticated replication systems may allow faithful replication of the 
Lead-in Zone. The present invention includes additional means of authenticating a 
20 DVD disc which overcome the disadvantages of present systems. One 
embodiment writes information in the Information Zone that cannot easily be read, 
such as the sector containing a header, error detection CRC and 2048 bytes of 
data (see Fig. 9). The contents of the header and CRC are prescribed in the DVD 
standard. If one or more selected sectors are written with any of incorrect header 
25 or CRC, the sector is generally unreadable. DVD-readers are generally incapable 
of reading such “bad" sectors, and DVD-recorders are generally incapable of 
writing bad sectors. Even more sophisicated mastering systems may not be able 
successfully to copy bad sectors. Therefore, if one or more bad sectors are written 
to predetermined locations on an authentic disc, a disc under test is deemed 
30 authentic if those sectors cannot be read. 
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A further embodiement of copy protection is effective against even 
sophisticated mastering and replication. This embodiment involves generating one 
or more ambiguous symbols. An ambiguous symbol is one that can decoded into 
at least 2 possible decoded values. Means for determining and producing 
ambiguous symbols are described hereinbleow. 

Generally speaking, a DVD reader will not return sector data determined 
to be in error. The reader will attempt to read the sector again and again (the 
number of retries may vary from reader to reader) until the sector is read 
successfully or the maximum number of retries is exceeded. Additionally, if the 
predetermined maximum of retries is exceeded, it is possible to request the drive 
to try again. 

Thus, if there is no error in a sector, a reader will return sector data very 
quickly. If there is a permanent error in a sector, the reader will return an error 
condition for every read. If however, at least one ambiguous symbol is in the 
sector, then the reader will generally have to reread the sector one or more times 
until all the ambiguous symbols decode to their correct values. For example, as 
described hereinbelow, if a sector contains four ambiguous symbols, for example, 
each ambiguous symbol having a 50% probability of decoding correctly, that 
sector is capable of being read correctly in 35 tries or less 90% of the time. 

It will be appreciated that ambiguous symbols can only be produced by an 
encoder modified according to the present invention. Therefore, conventional 
encoders cannot accurately reproduce a sector containing one or more 
ambiguities. Such an encoder will either generate a sector with a valid EDC or one 
with an invalid EDC. In the first case, the sector will be generally be read correctly 
the first time. In the second case, the sector will never be read correctly. Thus, if a 
sector containing at least one ambiguous symbol is read correctly in the first try, or 
never is read correctly when a predetermined maximum number of tries is 
exceeded, then the disc under test is very likely an unauthorized copy. If however, 
the sector is read correctly after more than one and less than or equal to the 
predetermined maximum number of retries, than the disc under test is very likely 
an authentic one. 
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It will be appreciated that the Reed-Solomon Product Code specified in the 
DVD standard will, in general, correct ambiguous symbols. The present invention 
also describes means of disabling Reed-Solomon error correction for those 
ambiguous symbols. 

The present invention provides improved methods for protecting a DVD 
from being illegally copied by producing a signature which includes inter alia, 
introducing ambiguous symbols into an ECC block and partially disabling the error 
correction. The present invention also provides a method for detecting and 
validating the signature on the DVD. 

There is thus provided in accordance with an embodiment of the invention, 
a DVD disc which includes at least one sector, configured to require at least two 
read operations to be read correctly. 

There is also provided in accordance with an embodiment of the invention, 
a DVD disc which includes a signature, the signature having at least one 
ambiguous symbol inserted into an ECC block during EFM+ encoding and having 
partially disabled error correction, the partially disabled error correction being 
produced prior to EFM+ encoding. 

There is thus provided in accordance with an embodiment of the invention, 
a DVD disc which includes a signature having at least one altered component in 
the lead-in zone of the DVD. Alternatively, the altered sector is in the data zone of 
the DVD. 

There is thus provided in accordance with an embodiment of the invention, 
a DVD disc which includes at least one appended or replaced sector in the data 
zone of the DVD; and at least one amended sector in the data zone of the DVD, 
the at least one sector being generally unreadable. 

There is also provided in accordance with an embodiment of the invention, 
a DVD encoder which includes at least one of the following group including an 
ECC block invalidator, an invalid Reed-Solomon parity symbol generator, an error 
correction disabler and an ambiguous symbol generator, and a non-standard 
sector generator. 




There is also provided in accordance with an embodiment of the invention, 
a table for converting 8-bit coded data into 16-bit code words. The table includes 
at least one 16-bit code word generally capable of being read in one of at least two 
possible ways. 

s In addition, there is also provided in accordance with an embodiment of 

the invention, a method for producing a signature on a DVD disc, The method 
includes partially disabling error correction prior to EFM+ encoding; and 
introducing at least one ambiguous symbol into an ECC block during EFM+ 
encoding. 

10 Furthermore, there is also provided'm accordance with an embodiment of 

the invention, a method for producing a signature on a digital optical disc (DVD). 
The method includes generating at least one sector, each of the at least one 
sectors requiring at least two read operations to be read correctly. 

Alternatively, the method includes appending or replacing at least one 

15 sector in the data zone of the DVD; and amending at least one sector in the data 
zone of the DVD so that the at least one sector is generally unreadable. 

Alternatively, the method includes altering at least one sector in the data 
zone of the DVD so that the at least one sector is generally unreadable, or 
alternatively altering at least one component in the lead-in zone of the DVD. 

20 Furthermore, there is also provided in accordance with an embodiment of 

the invention, a method for validating a signature on a DVD. The method includes 
comparing the time to read at least one unprocessed sector within the ECC block 
with the time to read at least one processed sector within the ECC block. 
Alternatively, the method for validating a signature on a DVD includes comparing 

25 the number of reads for at least one unprocessed sector within the ECC block to 
be read correctly with the number of reads for at least one processed sector within 
the ECC block to be read correctly. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

The present Invention will be understood and appreciated more fully from 
the following detailed description taken in conjunction with the appended drawings 
in which: 

Fig. 1 is a flow chart block diagram illustration for producing a signature 
that cannot be reproduced illegally operative according to an embodiment of the 
present invention; 

Fig, 2 is a diagrammatic representation of a Error Correcting Code (ECC) 
Block for a DVD; 

Fig. 3 is a detailed flow chart block diagram illustration of the flow chart of 

Fig. 1; 

Fig. 4 is a schematic block diagram illustration of an encoder used for 
producing a signature, operative in accordance with an embodiment of the 
invention; 

Figs. 5A and 5B are flow chart illustrations of validating the Non- 
Reproduceabie DVD signature produced according to Fig. 1; 

Fig. 6 is a graph illustrating the number of reads required to read a sector 
correctly 90% of the time, as a function of the number of ambiguous symbols in the 
sector; 

Fig. 7 is a schematic illustration of the packets in Data Description Protocol 
DDPID containing pointers to source files;and 

Fig. 8 is a schematic flow chart of the Premastering for the DVD of the 
present invention; 

Fig. 9 is a schematic illustration of the components of a DVD sector 

Fig. 10 is a schematic illustration of an Information Zone on a DVD disc; 

Fig. 11 is a schematic illustration of an Information Zone in more detail; 





Fig. 12 is a schematic illustration of three data values, respective EFM+ 
encodings, and respective ambiguous encodings, together with their respective pit 
and land patterns; 

Fig. 13 is a schematic illustration of a standard sector generator; 

5 Fig. 14 is a schematic illustration of an invalid sector header modifier of an 

invalid sector generator; 

Fig. 15 is a schematic illustration of an EDC calculator of an invalid sector 
generator; 

Fig. 16 illustrates a standard PO (Outer Priority) generator; 

io Fig. 17 is a schematic illustration of a PO (Outer Priority) generator 

operative in accordance with an embodiment of the invention; 

Fig. 18 is a schematic illustration of a standard PI (Inner Priority) 
generator; 

Fig. 19 is a schematic illustration of a PI (Inner Priority) generator for use 

15 in accordance with an embodiment of the invention; 

Fig. 20 is a schematic iliustration of a standard EFM+ encoder; and 

Fig. 21 is a schematic illustration of an EFM+ encoder operative in 
accordance with an embodiment of the present invention. 

APPENDIX A: Ambiguity Tables For DVD Main and Substitute Tables 
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STANDARDS / PUBLICATIONS REFERRED TO IN THE PRESENT INVENTION 


The following standards / publications (available from website: 
http:/ /www.ecma.cth are referred to in the following descripton: 

5 Optical Disc Specifications DVD family: 

Standard ECMA-267 120 mm DVD Read-Only Disk 3rd edition April 2001; 

Standard ECMA-272 120 mm DVD Rewritable Disk (DVD-RAM) 2nd 
edition June 1999; 

Standard ECMA-274 Data Interchange on 120 mm Optical Disk using 
jo +RW format 2nd edition June 1999; 

Standard ECMA-279 80 mm and 120 mm DVD-Recordable Disk (DVD-R) 
December 1998. 

Command Set of DVD Drives: 

Small Form Factor committee draft standard Mt. Fuji Commands for 
is Multimedia Devices SFF 8909i v5 revision 1.1 November 2000. 
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DEFINITIONS 


The following words/phrases shall have the definitions ascribed thereto in 
the present invention: 

Ambiguity - A non standard pattern of pits and lands on a DVD disc 
5 (generated by a non-standard table of EFM+ encodings) that generally may be 
interpreted by a DVD reader as more than one possible standard EFM+ 
encodings. 

Ambiguous symbol - A non standard EFM+ encoding that results in the 
production of an ambiguity. 

10 Signature - One or more alterations to a DVD disc that are generally 

detectable by DVD readers but generally difficuft to reproduce by DVD recorders or 
replication systems. 
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DETAILED DESCRIPTION OF THE PRESENT INVENTION 

The present invention describes methods for copy protecting a digital 
optical disc (DVD) (herein referred to as DVD or DG-DVD) by producing a 
signature for the DVD that cannot generally be reproduced illegally. A method for 
5 detecting and validating the DVD signature is also described. 

A DVD disc is composed of three main zones: Lead-in, Data and Lead-out 
zones. The DVD signature may have one or more components in the Lead-in 
Zone, Data Zone, and beyond the Data Zone. The components may be added to 
the original premaster data. 

10 Signature Components in Lead-in Zone 

These signature components may be implemented by a special 
CONTROL.DAT file that replaces the CONTROL.DAT file generated automatically 
O by the customer’s authoring or premastering software. (CONTROL.DAT is one of 

yp the standard input files used in the industry which are required for mastering, 

15 describing the Control data block of the Lead-in zone). 

® DVD recorders available to the public consumer are generally incapable of exactly 

m reproducing the control data block, They generally always set BCA descriptor to 

f 0x00, They also generally write default Disc Manufacturing Information 

Burst Cutting Area ('BCA') Descriptor 

y 20 The BCA is a special region of the disc near the hub that may be 

rr serialized during mastering or during manufacturing, as specified in Annex H of the 
DVD specifications. 

The presence or absence of BCA data is signaled by the BCA descriptor, 
located in Byte 16 of the first sector (the Physical format information sector) of 
25 each Control data block in the Lead-in zone. If there is no BCA data, the BCA 
descriptor is set to 0x00. If BCA data is present, the BCA descriptor is set to 0x80. 

In the DG-DVD of the present invention, the BCA descriptor is set to 0x80, 
for example, whether or not BCA data is present. 
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Disc Manufacturing Information (DMh 


Disc manufacturing information (DMI) is contained in the second sector of 
each Control block in the Lead-in zone, that is, the sector immediately following the 
Physical format information sector. 

5 DG-DVD may modify one or more bytes of disc manufacturing information, 

in particular, if the original disc manufacturing information is 0x00, DG-DVD may 
selectively change original disc manufacturing information from 0x00 to one of 
(0x01, 0x08, 0x10, 0x80) for example. 

Signature Component in Data Zone 

In an embodiment of the present invention, one or more of the Data 
sectors in the data zone may be modified. The modified sectors may be sectors 
which are not used or ignored by the content or program. 

There are several different ways to make sectors unreadable which may 
be carried out prior to forming ECC blocks. Reference is now made to Fig. 9, 
15 which is a schematic illustration of the composition of a sector, which contains a 
header, error detection CRC, and 2048 bytes of data. 

The EDC (error detection symbols) are calculated from a CRC (cyclic 
redundancy code) based on the contents of the sector. If any byte or bytes in the 
sector are read incorrectly, the CRC computed from the actual contents of sector 
20 does not match the CRC computed from the original contents of the sector as 
stored in the EDC. A DVD reader determines that the contents of a sector have 
been read correctly, if the CRC computed from the contents matches that stored in 
the EDC. 

For example, suppose an ECC block has been formed in the standard 
25 manner, and all its symbols encoded in EFM+. Suppose one of the EFM+ symbols 
is replaced by its ambiguous representation, as discussed later, and the modified 
ECC block written to disc in the usual manner. When a DVD reader attempts to 
read the sector within the modified EFM block from the disc, the modified EFM+ 
symbol may decode to its original value. In this case, the EDC computed from the 
30 sector as read corresponds to the EDC stored in the sector. The sector is read 
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correctly. If, however, the ambiguous symbol decodes to a value other than the 
original one, the computed EDC will not match the stored EDC. In this case, the 
reader will return an error condition. As the number of ambiguous encodings in a 
sector increases, the number of reads required to return the original contents of 
the sector increases as well. 

The contents of the sector header, such as the ID (Identification Data), JED 
(ID Error Detection Code), CPR_MAI (Copyright Management Information), for 
example, may be altered prior to forming ECC blocks. The alteration may be 
made by taking the 1's complement (changing the ”0” to “1" or "1" to “0”) of one or 
more components, or by randomly generating new components, for example. The 
EDC may be modified to correspond to the altered components of the sector 
header. 


Alternatively, the EDC can be altered again, by taking the 1's complement 
(changing the ”0" to “1” or ”1" to “0”) of one or more components. 

In a further alternative, one or more of the remaining 2048 bytes of the 
sector can be altered, for example by taking Ts complement, without 
corresppondingiy modifying the EDC. 

In a further embodiment of the present invention, the DG-DVD may 
append or replace a plurality of data sectors to the original Data zone, for example 
4096 data sectors. The user data portion of each appended or replaced sector 
may consist of 2048 bytes, for example, of binary zeroes. 

The additional data sectors may not be reflected in End sector number of 
the Data Zone, found in byte position 9-11 of the Physical format information 
(Sector 0) of the Control data block, The End sector number may remain 
unchanged from its original value. 

Thus, any disc copying scheme that consults the End sector number may 
not be aware of the additional data sectors, which will therefore not be copied and 
thus, the signature will not be validated 

The appended sectors, numbered 0..4095, may be divided into 2 groups 
in a pseudo-random manner: 





• Group 1 —may consist of 1024 sectors that are generally unreadable; 

• Group 2 —may consist of 3072 sectors that are generally readable. 

The seed for the pseudo-random number generator generated may be a 
function of the sector number of the start of the appended data. The appended 
5 sectors may be made unreadable as described hereinabove with reference to Fig. 
9. 

Signature — Legally Non-Reproducible 

In a further embodiment of the present invention, a signature is added to 
the DG-DVD that cannot be illegally reproduced, The signature is characterized by 
to being placed in sectors that generally require more than one read operation to 
return data successfully. This component may require a specially modified 
encoder for producing ambiguous symbols and selectively disabling Reed- 
Soiomon parities, and thus is resistant to copying in home recorders and 
unauthorized manufacturing facilities. 

is This signature may be produced in place of or in addition to appending 

4096 data sectors to the original Data zone, described above 

An exemplary method for producing a signature that cannot be 
reproduced illegally is now described with reference to the flow chart block 
diagram illustration of Fig. 1. 

20 The method comprises partially disabling error correction (step 202) prior 

to EFM+ encoding and introducing ambiguous symbols into an Error Correcting 
Code (ECC) block (step 204) during EFM+ encoding. Then the signature is 
validated by measuring the length of time it takes to correctly read the ‘amended’ 
sector within the block or alternatively, by counting the number of read operations it 
25 takes to correctly read the amended sector (step 206). 

Reference is now made to Fig. 2, which is a diagrammatic representation 
of a Error Correcting Code (ECC) Block. 

Each Block contains 16 sectors, each sector containing 2064 bytes. The 
2064 bytes comprise 2048 bytes of Main Data, 12 header bytes, and 4 bytes of 
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Error Detection Code (EDC), The 12 header bytes comprise 4 identification bytes 
(ID), 2 error detection bytes (IED) and 6 copyright management bytes (CPRJVIAI), 

After scrambling the Main Data in the Data Sectors, Reed-Solomon error 
correction coding information is added to each group of 16 Data Sectors to form an 
5 ECC block with supplementary inner-code parity (PI) and outer-code parity (PO) 
bytes. 

After EDC calculation over the Data Sectors, scrambling data are added to 
the 2048 bytes of Main Data in the Data Sector. Then, the Error Correction Code 
is applied over 16 Data Sectors, or one ECC block (33,024 bytes). 

io The 2064 bytes of each sector are arranged as 12 rows x 172 bytes. Thus 

16 sectors comprise a block consists of 192 rows x 172 bytes, as shown. The 
bytes are referenced from B 0,0 (110) to B 191, 171 (112). 

In addition, 16 bytes (rows) of Outer Parity (PO), referenced from B192.0 
(114) to B207, 171 (116), are added to each column (that is 16 rows x 172 bytes), 
is 10 bytes (columns) of Inner Parity (PI) referenced from B0,172 (118) to B207, 181 
(120) are added to each of the 208 rows (192 data + 16 formed by the PO-bytes) 
to form a Reed-Solomon Product Code with 208 rows and 182 columns (172 data 
+ 10 formed by the Pl-bytes. 

The Reed-Solomon code can generally correct up to 5 byte errors of 
20 unknown location in each column, and up to 8 byte errors of unknown location in 
each column. If error locations are known, then up to 10 errors can be corrected in 
each row, and up to 16 errors can be corrected in each column. 

Reference is now also made to the flow chart illustration of Fig. 3, which 
illustrates the steps of introducing ambiguous symbols into an ECC block (step 
25 202) and partially disabling error correction (step 204) -Fig. 1. 

In an ECC block (comprised of 16 sectors plus parity symbols), one of the 
columns (I) (0<= I < 172) is selected (step 210). For example, column 1= 170. In 
column 170, one byte is selected (step 212), for example symbol Biag, 170 (126) 
which has 10 -PI bytes (Rows: B 16 9 , 172 to B 18 9 , iei) and 16- PO bytes (Col: B 192f 170 

30 tO B207, 170 )- 
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At least ‘M 1 outer parity symbols (PO) of the 16 PO bytes (B 19 2,170 to B 207 , 
170 ) in column 170 are invalidated (step 214), for example in an embodiment, 'M' = 
8 , (that is half of the 16 PO bytes),. Parity symbols may be invalidated by 
replacing each symbol by any other symbol, or by replacing each symbol by its I's 
s complement prior to EFM+ encoding. The invalidated PO symbols will then not be 
able to correct any errors in that row. 

At least ‘N‘ inner parity symbols (PI) of the 10 PI bytes in each row 
containing one of the above invalid outer parity symbols is then invalidated (step 
216). For example in an embodiment, r M' = 8, (that is half of the 16 PO bytes). If 
10 eight PO bytes (B192,170 to B 199170 ) have been invalidated, then at least five of the 
ten PI bytes in each of rows B 10 2 ,to B 199i should be invalidated, for example, in row 
192, five of the ten P! bytes referenced B192,172 to B192, i8i- 

At least ‘P’ data symbols (the targeted symbols) in the column (170) are 
replaced by their corresponding ambiguous representation (step 218) at the time of 
15 EFM+ encoding. In an embodiment, p=4. 

At least ‘Q’ inner parity symbols in each row (in the example - row 189) 
containing a targeted symbol are then invalidated (step 220). In an embodiment, 
‘Q’ = ‘N’ =5, that is at least five of the ten PI bytes referenced Bi e9i 172 to B 189 , 181 ) 
are replaced. 

20 Steps 212-220 may be repeated for any other bytes within the selected 

column 170 (step 222). 

Another column (I’) (0<= Y < 172) may be selected (step 224) and steps 
212-222 repeated for bytes in that column (step 226). 

It will be appreciated by those knowledgeable in the art that the invention 
25 is not limited by the number of bytes within a column or the number of columns. 

it will also be appreciated by those knowledgeable in the art that the 
invention is not limited to the specific number of invalidated PO and PI symbols nor 
by the specific number of targeted data symbols which are replaced by their 
ambiguous representations, which have been used in the example described 
30 above. 
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The amended ECC block contains at least one ambiguous symbol, which 
means that when an attempt is made to read the ECC block, there is a 50% 
chance that the symbol will be read correctly. 

DVD uses EFM+ encoding to convert 8 bit data and parity to 16 bits. An 8 
bit symbol is encoded according to a Main Table and Substitute Table, each table 
containing 4 possible encodings, depending on encoder state. 

The 8-bit bytes of each recording frame are transformed into 16-bit code 
words wuth the run length limitation (RLL) that between 2 ONEs there are at least 
2 ZEROs or at most 10 ZEROs (RLL 2.10). 

Tables G.1 and G.2 (of the Standard ECMA-267, 3 rd edition, April 2001) 
list the 16-bit Code Words into which the 8-bit coded Data bytes have to be 
transformed for the main Conversion and Substitution Tables, respectively. In the 
tables, the 8-bit bytes are identified by their decimal value. 

The DVD standard defines a 4-state EFM+ encoding engine. The 16 bit 
code word is a function of the 8 bit data value and the current state. The next state 
is a function of the current state and the 16 bit code word. The encoding state 
engine is defined in Main Tables and Substitution Tables in the DVD standard. 

The Applicant has determined, for each possible encoding (with a few 
exceptions), pairs of encodings that differ by 1 transition position. By shifting the 
transition to be between that of the pair, an ambiguous encoding is generated. 
Thus, when the DVD is read, the ambiguous data will be read as one of at least 2 
possible values, only one of which is correct. 

Tables showing ambiguous DVD pairings are shown in Appendix A. The 
tables of ambiguous symbols are similar to Main Tables and Substitution Tables 
(G.1 and G.2) in the DVD standard showing the 4-states for each 8-bit byte with 
the addition of two extra columns for each State, referenced 'shift' and ‘alt’. Each 
1 -bit byte has two of the bits marked “?’ -indicating that these bits are ambiguous 
and may be read as either a 'zero’ or ‘1’. 

The column ‘shift’ indicates the number of the bit which should be moved 
(starting from the left) and the arrow </> indicates the direction of the transition. 






The column ‘alt’ indicates the alternative 16-bit encoding value which is 
equivalent to the alternative reading of the ambiguous symbol marked’?’. 

Reference is now made to Fig. 12, which illustrates three data values, 
respective EFM+ encodings, and respective ambiguous encodings, together with 
5 their respective pit and land patterns for State 1. For example, the 8-bit byte ‘O’ 
(hex value ‘00’) in the main conversion Table G1 has a codeword 
‘0010000000001001’ (Fig. A) The next state is ‘state-1’. 

In the Ambiguity Table (APPENDIX A), for the 8-bit byte ‘value O’, the 3 rd 
and 4 th bit are marked with '?’ indicating that the transition to T may be read at 
10 either the 3rd or 4th bit position. Thus the value ‘O' is ambiguous and can be read 
in either of two possible ways. If the 16-bit encoding is read as ‘0010’ for the first 
4-bits, then the value is read as ’0‘ - (Fig. A) (as per the value of ‘O'; in Table G1). 
Alternatively, If the 16-bit encoding is read as ‘0001’ for the first 4-bits, then the 
value is read as decimal ‘18’ (equivalent to hex ‘12’) -( Fig. B). 

15 In the Ambiguity Table HI, the shift is shown as 3>, instructing an encoder 

as per this invention to generate a transition between the 3rd and 4th bits, the 
shifted transition (Fig. C). Alternatively, a different combination may be used, for 
example as shown in Figs D and E, the combination of 0 and 19 may be used. In 
19 middle transition . 

20 As will be appreciated by persons knowledegable in the art, any suitable 

combination of symbols may be configured to produce ambiguous symbols. 

An ECC block is comprised of 16 sectors plus parity symbols. Each sector 
contains an Error Detection Code (EDC). The EDC is a 4-byte field which contains 
the check bits of an EDC computed over the preceding 2060 bytesof the Data 
25 Frame. 

In an alternative embodiment, the EDC can be compared with the 
checksum generated for the corrected sectors after the error correction has taken 
place and before the data is read. If the checksum is correct, then the correct 
values have been passed on and the DG-DVD is valid. If the checksum is not 
so correct, then an error condition is generated. 
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The checksum value itself can be changed so as to be defective. That is, 
an illegal copy, which carries out error correction and produces a ‘correct’ 
checksum will in fact be ‘incorrect* and indicative of its illegality. 

Detectinq/Validatina the Non-Reproducible DG-DVD Signature 

5 The Non-Reproduceable DG-DVD signature may be validated by 

comparing the time to read at least one unprocessed sector within the ECC block 
with the time to read at least one processed sector within said ECC block. 

Reference is now made to Fig. 5A, which is a flow chart illustration of 
validating the Non-Reproduceable DG-DVD signature produced as described 
10 hereinabove. An unprocessed sector in the targeted sector is read to obtain a 
‘baseline’ read time (step 302), The time to read a sector within the processed 
ECC block is determined (step 304). The sector within the processed ECC block 
is continously read until either it is successfully read or is timedout (query box 306). 

If timeout is reached, the sector is deemed to be permanently bad (308). 
15 In other words, the DG-DVD signature component is not found. 

If sector is readable, a comparison is made with the baseline time(query 
box 310). If the time is comparable to baseline read time as above, the sector 
does not have the DG-DVD signature component (312). 

if the signature is read in a time significantly greater than baseline read 
20 time (314), sector does have a signature component (316) 

The expected number of reads as a function of ambiguous symbols is 
shown in Fig. 6. 

An alternative embodiment is illustated in Fig. 5B, to which reference is 
now made. Fig. 5B is a alternative flow chart illustration of validating the Non- 
25 Reproduceable DVD signature produced as described hereinabove, and is similar 
to Fig. 5A. 

In the embodiment of Fig. 5B, an unprocessed sector in the targeted 
sector is read to obtain a 'baseline' number (Nb) for the number of times a sector 
needs to be read (step 352). The numberof reads for a sector within the 
30 processed ECC block is then determined (step 354). The sector within the 
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processed ECC block is continously read until either it is successfully read or 
exceeds a pre-determined number of reads (query box 356). 

If the pre-determined number of reads is reached without a successful 
read, the sector is deemed to be permanently bad (358). In other words, the DVD 

5 signature component is not found. 

If sector is readable, and the number of reads is one, (query box 360) the 
sector does not have the DVD signature component (362). 

If the number of reads (Np) is greater than baseline number (Nb) (364), 
the sector does have a signature component (366) 

10 

SIGNATURE VALIDATION 

Validating a DG-DVD signature may consist of 4 validation tests: one 
passive test and 3 active tests. The criteria for a disc to be deemed a copy may be 
for failure to pass at least one of the tests. 

is The tests may be implemented using basic, low-level Mt Fuji (SFF8090) 

functions, known in the art. If a drive is unable to execute a given validation test, 
that test may be ignored. If a drive is unable to execute any of the validation tests, 
the disc may be deemed to be an original. 

Passive Validation Test 

20 The passive test positively detects all copies made on recordable or 

rewritable media. The test is called passive because it does not require any 
special actions at mastering time. 

The DVD specification requires that a DVD disc contain information about 
type of disc (Book Type). Currently, the possible values of Book Type are DVD- 

25 ROM, DVD-RAM, DVD-R, DVD+RW and DVD-RW. 

Therefore, the passive test may use the ‘READ DVD STRUCTURE’ 
command (p.365 of Mt Fuji Spec. (SFF8090)), Format Code 0x00 to read the Book 
Type, if Book Type is anything but DVD-ROM, the disc may be deemed to be an 
illegal copy. 
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Active Tests 


Active tests look for the special DG-DVD modifications to the BCA and 
DM1 made during mastering. If a modification is not detected, the disc may be 
deemed to be an illegal copy. The active tests may include: 'BCA Descriptor Test’, 
5 the ‘Disc Manufacturing Info (DMI) test’ and the ‘Altered Sectors Test'. 

Alternatively, instead of the Altered Sectors Test 1 , the active test may 
include the ‘Detection of the DVD Signature’. 

• BCA Descriptor Test 

The test may use the ‘READ DVD STRUCTURE’ command, Format Code 
10 0x03. If the command returns a result of Invalid Field in CDB, meaning that the 

BCA descriptor says that there is no BCA on the disc, then the disc may be 
deemed to be an illegal copy. As described hereinabove, In the DG-DVD of the 
present invention, the BCA descriptor is set to 0x80, whether or not BCA data is 
present. 

is * Disc Manufacturing Info (DMh Test 

This test may use the 4 READ DVD STRUCTURE’ command, Format 
Code 0x04. 

If the data returned does not include the bytes modified, the disc may be 
deemed to be an illegal copy. As described hereinabove, DG-DVD may 
20 selectively change one or more of the 0x00 to one of (0x01, 0x08, 0x10, 0x80) for 
example. 

• Altered Sectors Test 

This test may use the ‘READ DVD STRUCTURE’ command, Format Code 
0x00 to obtain the original End sector number of the Data zone. 

2 s Using the same pseudo-random generator as described above, the 

verification software shall regenerate Group 1 and Group 2 at runtime. Using a 
time and/or system dependent seed, the software shall randomly select 9 sector 
numbers from Group 2 and 1 sector number from Group 1. 
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This test then uses the ‘DVD READ 12’ command to attempt to read the 
10 selected Group 1 and Group 2 sectors. 

The disc may be deemed an illegal copy if any sector from Group 2 is 
unreadable, or if the sector from Group 1 is readable. 

m Detecting the Non-Reproducible DG-DVD Signature 

As described hereinabove. The DG-DVD signature may be validated by 
comparing the time to read at least one unprocessed sector within the ECC block 
with the time to read at least one processed sector within said ECC block. 

It will be appreciated by those knowledgeable in the art that the invention 
is not limited to the passive and active tests described above. 

Reference is now made to Fig- 4, which is a schematic block diagram 
illustration of an encoder, generally designated 400, in accordance with an 
embodiment of the invention. 

An EFM+ encoder according to an embodiment of the invention causes a 
laser beam recorder to write a pattern of pits and lands having at least one non- 
standard pit or land width. When a disc having such a pattern is read in a DVD 
reader, the decoder in the reader may interpret the pattern as one of two or more 
closest matching standard patterns. Ideally, the non-standard pit to land (or land to 
pit) transition occurs just as the decoder is determining if a transition has occurred. 
Therefore, instantaneous noise or jitter may affect the decoder’s decision. In some 
instances, the decoder will just ’’miss" the transition, and the detected pit or land 
length will be stretched to the next standard size. In other instances, the decoder 
will just detect the transition, and the detected pit or land length will be shortened 
to the previous standard size. 

The table of ambiguous symbols has been chosen such that a pattern with 
a stretched pit or land decodes to a certain 8-bit data value, and a pattern with a 
shortened pit or land decodes to a different 8-bit data value. Hence, reading a 
portion of a DVD containing such an ambiguous symbol a plurality of times will 
generally result in different data values being read from the ambiguous symbol. If 
additionally Reed-Solomon error correction has been partially disabled as 
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described herein, in accordance with an embodiment of the invention, then the 
detection and decoding process in a DVD drive may not alter any of the different 
data values resulting from reading an ambiguous symbol. The drive generally 
determines if the data values of a sector are correct if the computed EDC matches 
5 the EDC stored as part of the sector data. 

In accordance with an embodiment of the invention, one of the possible 
values decoded from an ambiguous symbol results in a valid EDC (the detected 
data value matches the original data value on which the stored EDC was based), 
whereas the other possible values decoded from the ambiguous symbol result in 
10 an Invalid EDC (the detected data value does not match the original data). 

Generally, a DVD drive will signal an error condition if a sector is read in 
which the computed EDC from the sector contents does not match the stored 
EDC. If the sector with a least one ambiguous symbol is read repeatedly, then 
0 within a sufficiently large number of reads each ambiguous symbol will be decoded 
JS 15 correctly. In this case, the DVD drive will signal a success condition and return the 
sector data. By counting the number of reads necessary to read successfully, or 
equivalently, by determining the time necessary to read successfully, it is possible 
CP to infer whether or not a sector has ambjiguous components. 

Encoder 400 may accept an ambiguous symbol and produce a 
T 20 corresponding transition shifted pit/land pattern that results in an ambiguity on a 
'"4. disc. | 

b& Encoder 400 may comprise ai invalid sector generator 402, which may 

I 

comprise a sector header modifier 404 and an EDC modifier 406. 

i 

The sector header modifier 404 may comprise an ID (Identification Data) 
25 modifier 408, an IED (ID Error Detection Code) modifier 410 and an CPRJVIAI 
(Copyright Management Information) rrjodifier412. 

Reference is now made to !pig. 13 which shows a standard sector 
generator 420 comprising a standard deader calculator 422 and a standard EDC 

i 

calculator 424. The standard header calculator 422 receives the location and 
30 rights management data. The EDC calculator 424 calculates the EDC based on 
the 2048 bytes of the main data together with 12 bytes of the header. The 2048 
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bytes of the main data, 12 bytes of the header and 4 bytes of EDC generated are 
then formatted (426) to produce the formatted sector of 2064 bytes. 

Reference is now made to Fig. 14 which illustrates the invalid sector 
header modifier 404 of the invalid sector generator 402 according to an 
s embodiment of the present invention. The invalid sector generator 402 comprises, 
in addition to the sector header modifier 404, the standard header calculator 422 
(similar to Fig. 13A), a selector 430 and a comparator 432. The location and rights 
management data is received by both the invalid header modifier (calculator) 404 
and the standard header calculator 422. 

io The comparator 432 compares the current location with a table of targeted 

locations and if they match, the selector 430 selects the invalid header which is 
then added to the 2048 bytes of the main data and 4 bytes of EDC generated to be 
formatted (426). If there is no match between the the current location with a table 
of targeted locations, then the standard header 422 is used in formatting the 
i$ sector. 

Reference is now made to Fig. 15 which illustrates the EDC calculator 406 
of the invalid sector generator 402 according to an embodiment of the present 
invention. The invalid sector generator 402 comprises, in addition to the EDC 
calculator 406, the standard EDC calculator 424 (similar to Fig. 13A), a selector 
20 440 and a comparator 432. The location and rights management data is received 

by both the invalid EDC calculator 406 and the standard EDC calculator 424 
calculating two separate EDC values. 

The comparator 432 compares the current location with a table of targeted 
locations and if they match, the selector 440 selects the invalid 4 bytes EDC which 
25 is then added to the 2048 bytes of the main data and 12 bytes of standard header 
to be formatted (426). If there is no match between the the current location with a 
table of targeted locations, then the standard EDC 424 is used in formatting the 
sector. 

Reference is now made to Fig. 16, which shows a standard PO (Outer 
30 Priority) generator 450. For each of the 172 columns of a sector, the 192 data 
bytes are received by the PO generator 450 which generates 16 parity bytes. The 
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16 parity bytes are then combined with the 192 bytes in the column combiner 452 
to generate 208 bytes for the column. 

Reference is now made to Fig. 17, which illustrates a PO generator 460 of 
the present invention. PO generator 460 comprises the standard PO generator 
450 (of Fig. 16), an invalid PO generator 462, a selector 464 and a comparator 
466. For each of the 172 columns of a sector, the 192 data bytes are received by 
the PO generator 450 which generates 16 parity bytes. The same 192 data bytes 
are received by the invalid PO generator 462 generates 16 invalid PO bytes. 

The comparator 466 compares fee current location with a table of targeted 
locations and if they match, fee selector 464 selects the invalid PO bytes which are 
then combined wife fee 192 data bytes in the column combiner (452). If there is no 
match between the the current location with a table of targeted locations, then the 
standard PO bytes are used in the column combiner (452). 

Reference is now made to Fig. 18, which shows a standard PI (inner 
Priority) generator 470. For each of the 208 rows of a sector, the 172 data bytes 
are received by the PI generator 470 which generates 10 PI parity bytes. The 10 
PI parity bytes are then combined with the 172 data bytes in the row combiner 472 
to generate 182 bytes for the row. 

Reference is now made to Fig. 19, which illustrates a PI generator 480 of 
fee present invention. PI generator 480 comprises the standard PI generator 480 
(of Fig. 16), an invalid PI generator 482, a selector 484 and a comparator 486. For 
each of the 208 rows of a sector, the 172 data bytes are received by the PI 
generator 470 which generates 10 standard parity bytes. The same 172 data 
bytes are received by the invalid PI generator 482 generates 10 invalid PO bytes. 

The comparator 486 compares fee current location with a table of targeted 
locations and if they match, the selector 484 selects the invalid PI bytes which are 
then combined with the 172 data bytes in the row combiner (472). If there is no 
match between the the current location with a table of targeted locations, then the 
standard PI bytes are used in the row combiner (472), 

Reference is now made to Fig. 20, which shows a standard EFM+ 
encoder 500, which receives the recording frame and converts each 8-bit data into 



16-bit code word using the standard main and substitution tables 502 (Tables G.1 
and G.2 (of the Standard ECMA-267). The tables also determine the state for the 
next 8-bit data conversion. EFM+ encoding is carried out prior to laser beam 
generation of the pits and lands of the DVD. 

5 Reference is now made to Fig. 21, which shows an EFM+ encoder 510 in 

accordance with an embodiment of the present invention. In addition to the 
standard main and substitution tables 502, encoder 510 also comprises 
ambiguous main and substitution tables 512, a selector 514 and a comparator 
516. 

io Each 8-bit data is connverted into 16-bit code word using the standard 

main and substitution tables 502 and the ambiguous main and substitution tables 
512. 

The comparator 516 compares the current location with a table of targeted 
locations and if they match, the selector 514 selects the 16-bit codeword 
is generated by the ambiguous main and substitution tables 512. If there is no match 
between the the current location with a table of targeted locations, then the the 16- 
bit codeword generated by the standard main and substitution tables 502 is 
selected. 

PREMASTERING A DG-DVD DISC 

20 Exemplary requirements for premastering a DG-DVD Disc are described 

below. It will be appreciated by those knowledgeable in the art that the invention is 
not limited thereto. 

Hardware and software requirements for DG-DVD pre-mastering 

Hardware: Desktop PC, MMX-200 or better, 64 Mbyte RAM or more, 
25 secondary 10 GB hard disk for source files, DLT tape drive (Quantum DLT 4000 
external), fast-SCSI controller 

General description of premaster source material 

Data Description Protocol (DDP) is a mechanism for describing to the 
mastering system how the source data is to be laid out on disc. DDP 2.0 and 
30 above is the protocol that applies to DVD source data. 
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A customer premaster may consist of standard DDP 2 source files on DLT 
tape (Type ill, IIIXT, or IV). 

Before DG premastering, an executable may already have been protected 
by the customer, using DG/DVD Protector, and the protected application may have 
been written to DLT tape in DDP 2 format. 

A premaster consists of a DDPID file, followed by optional text files, 
followed by optional Video Object Location Files, followed by a mandatory Lead-in 
Control Information file (generally called CONTROL.DAT), followed by a 
mandatory DVD Image file (generally called IMAGE.DAT). 

Packets in DDPID contain pointers to, and other information about, the 
source files, as shown in Fig. 7. 

DG-Premasterina 

DG-DVD requires modifying the original DDPID and CONTROL.DAT and 
appending new content to IMAGE.DAT. 

The original customer DLT may remain unchanged, and retained for 
documentation purposes, and the DG/DVD premaster may be written to a second 
tape to be sent for mastering. 

These modifications are now specified individually. 

Modifying CONTROL.DAT 

The existing CONTROL.DAT may be modified as follows: 

• Sector 0, Byte 16 may be set to the value 0x80. 

• Sector 1 may be filled with the desired Disc manufacturing data as 
described hereinabove. 

Modifying IMAGE.DAT 

This file may contain altered data as described above. 

Group 1 sectors and Group 2 sectors shall be generated as follows: 

The original IMAGE.DAT may be converted from 2048 byte user data 
sectors Source Storage Mode (SSM) = 0, to Complete 2054 byte data sectors, 




SSM = 1. This is done by prepending 6 bytes of binary zero to each original 
sector. 

The first byte of each 2054 byte sector contains Copy Protection 
information as per the ECMA Publications (Appendix B). If this byte is set to OxFO, 
5 the sector is interpreted as containing secure data that is may not be readable 
without a correct access key (part of the CSS system). Since there is no access 
key on the disc, the sector may be unreadable. If the first byte is set to 0x00, the 
sector is interpreted as having no security, meaning that the sector may be 
readable. 

io Therefore, each Group 1 sector may have its first byte set to OxFO, and 

each Group 2 sector may have its first byte set to 0x00. 

Modifying DDPID 

DDPID may be modified so that its DDPMS section describing 
IMAGE.DAT contains an SSM field whose value is 1. 

15 DG Premastering Work Flow 

The DG Premastering Work Flow is illustrated in the flow chart of Fig. 8. 

It will be appreciated by persons skilled in the art that the present 
invention is not limited to what has been particularly shown and described 
hereinabove. Rather the scope of the present invention is defined only by the 
20 claims, which follow: 
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APPENDIX A 

AMBIGUITY TABLES FOR DVD 
MAIN AND SUBSTITUTE TABLES 


29 


3704-US 






145 







































































































































































IMP 

Main Tables 

































































































































































































































































































































































































































Main Tables 
















































































































































































































— oo 
“c3 cn 


« A 


CJf= 

to 

CD 

<l> = = _Q 

xs~ ca 

<fe l- 



































































































































































































































A tn rvl tA 2 CM 
V V V V V V 



fNj rvj f'J 

V V V 



mm 


CJ 

a«js 
•a;.-. ,co 
Mi I— 


























































































































































































































rr\ 







































































































Iiiininiiiiiigiiiin 
1 



O'* o> nr* ui rv*i cTj 
^ ^ H m 

nj rvf rvj 




HtNfO 
H H H 


l£> Lrt 55 

V V V y 


iBigiiiim 

BBBBB P^ B BB BBBBBBB BB B BBB B 



nriko to fS 01 








































































































































































































| N A A 
S V 10 oo 



liBflilBBBBBBBBBBBB 




N (Vj rl 
U“» fSJ 

rsi rsi 


^vv^vvvvv^^^v 


«N cri ca 
v □ v v 


9199899 


<sD <£> <£j to Ln LTI Ln 

V V V V V v V 



rsj Pft KN 

V V V 
























































































































































































































CTi 

m 

































































